Security
Nothing consequential happens without your signature.
The system prepares. You approve. Every action is logged: who, what, which record, when. If anyone ever disputes what happened, you have the record.
| Action | Record | By | When |
|---|---|---|---|
| Document filed | J. Whitfield | You confirmed | 9:14 AM |
| Form filled, not submitted | M. Okafor | Omni Key™ | 9:02 AM |
| Renewal flagged | T. Nguyen | Vault | 8:40 AM |
| Draft review reply | Google review | Waiting on you | 8:12 AM |
| Appointment booked | K. Osei | Front Desk | 7:58 AM |
Custody, with controls.
Your records sit in custody under defined controls, with an auditable record. One record per client, encrypted, access-controlled. Every consequential action is logged. That is the defense: not that nobody holds your records, but that they are held to a standard you can inspect.
The book on a laptop is the risk.
That spreadsheet is protected health information, unencrypted, walking around in a bag. Lose the laptop and federal law calls it a breach: written notice to every affected client within 60 days, and to the government. Penalties are assessed per violation, which can mean per record, with annual caps above $2 million. Small practices, not just carriers, have settled for six figures. The fine is survivable. The letters to your own book usually are not.
HIPAA, end to end.
Compliance spans the whole system, from the first text to the record at rest.
- Executed agreements across every link
- Encryption
- Access controls
- Audit logging
- A written policy pack
- Text messaging registered under your own business entity
Omni Key™ is not a bot.
No decisions on its own, no submissions on its own, no attestations, ever. It fills pages you opened with data you own; on HealthSherpa, an application goes through the API only when you fire it. Every submission is yours, under your license, and logged.
Marketing never reads your book.
Posts, pages, campaigns, and review replies are drafted from what you give it. It never reads your book and never touches the Vault. A hard spend cap is on by default; you set the ceiling.
Ownership and exit.
The Vault is a system you own. We build it and manage it, with access you can revoke. It lives in your cloud account, in your name, on your card. Leaving looks like this: we hand over control, documentation, and credentials, remove our access, and your Vault keeps running without us. $500 flat, stated here so the exit is priced, not punished.
Front Desk is a communications service we operate and include in your monthly price. It isn't a separate bill and isn't part of what you own; the Vault is.